4. 



1. (original) An improved personal device to be connected 
to a terminal for establishing a trustworthy connection 
between a user via said device and said terminal which 
is connected to and authenticatable by at least one 
server, the improvement comprising at least one storage 
component for storing predetermined authentication 
information (vec) communicatable to the terminal for 
said terminal to create an authenticity output message. 

2. (currently amended) An improved personal device to be 
connected to a terminal for establishing a trustworthy 
connection between a user via said device and said 
terminal which is connected to and authenticatable by 
at least one server, the improvement comprising at 
least one device authentication component for said 
device to authenticate itself to the terminal upon 
receipt of terminal an^h^7. tication information fr-^n, 
said servf>r . 

3. (original) An improved personal device to be connected 
to a terminal for establishing a trustworthy 
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connection between a - user via said device and said 
terminal which is connected to and authenticatable by 
at least one server, the improvement comprising 
messaging component for requesting user authentication 
information from the user and a comparison component 
for verifying the authenticity of the user 
authentication information. 

4. (original) The improved personal device, according to 
claim 1, wherein the authenticity output message (m^) 
comprises at least one of visible, audible and tactile 
information, 

5. (original) The improved personal device, according to 
claim 1, wherein the authenticity output message (nu>) 
comprises at least one value for lookup in a table 
stored in the terminal. 

6. (currently amended) A terminal for establishing a 
trustworthy connection between a user and a server, the 
terminal comprising : 

a device input component for input of a user device; 
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a communication component for establishing and 
conducting communications with a server an d fcL 
■ rocoiving^ . 

a message crfta1-ion comnnn e nt for dvnamicallY r-r^>.^^ir,^ 
at least one authenticity output message upon 
authentication bv 4afe» said server; and 

at least one message output component for outputting 
the at least one authenticity output message to the 
user. 

7. (original) The terminal according to claim 6 further 
comprising at least one user input interface component 
for receiving user input. 

8. (currently amended) The terminal according to claim 6 
further comprising a stored lookup table which is 
accessible for creating said ™ — fefee authenticity 
output message. 

9. (currently amended) A server, being equipped for 
establishing a trustworthy connection between a user 
and a terminal via a user input device comprising: 
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a communication component for establishing and 
conducting communications along ^ first 1-rn.^oH 
^ connection with the terminal and along . ..econd f-■rn..^.H 
connection with said user inonl- devicp .- 

receiver means for receiving at least one 
authentication request from said terminal; 

at least one authentication component for verifying the 
authenticity of the terminal; and 

a message generation component for generating at least 
one authenticity output message for delivery directly 
to said user input device along ^ aid second trusted 
connection at oaid terminal . 

10. (original) The server according to claim 9 further 
comprising a session key creation component for 
creating a session key to be communicated to said 
terminal . 

11. (original) The server according to claim 9 further 
comprising at least one storage location for storing at 
least one user-specific authenticity output message and 
wherein said message generation component accesses the 
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stored at least one user-specific authenticity output 
message for display to the user at said terminal. 

12. (currently amended) A method for establishing a 
trustworthy connection between a user via a ^ 
personal device and a terminal which is connected to 
and authenticatable by at least one server which is 
authenticatable by said device, comprising: 

said server authenticating said terminal; 

^ establishing a first authenticated trusted connection 

upon success of said authenticating; 

said server authenticating itself to said device; 

establishing a second trusted connection between said 
server and said device; and 

said server providing a terminal authenticity message 
via said established second trusted connection 
confirming the established authenticity of said 
terminal -^ terminal . 
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13. (original) The method according to claim 12 further 
comprising communicating said terminal authenticity 
message to said user. 

14. (original) The method according to claim 13 wherein 
said communicating comprises displaying said message by 
said device. 

15. (original) The method according to claim 13 wherein 
said communicating comprises displaying said message by 
said terminal. 

16. (original) The method according to claim 12 wherein 
said providing a terminal authenticity message 
comprises accessing at least one stored user-specific 
message . 

17. (original) The method according to claim 12 wherein 
said providing a terminal authenticity message 
comprises exchanging a predetermined set of messages 
with said user. 

18. (original) The method according to claim 15 wherein 
stored predetermined authentication information (vec) 
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is communicated from the device to the terminal for 
creating there an authenticity output message (mo) - 

19. (original) The method, according to claim 12 further 
comprising the device authenticating itself to the 
terminal , 

20. (original) The method according to claim 12 further 
comprising the device requesting that the user 
authenticate himself. 



21. (original) The method according to claim 14 wherein 
the device outputs the terminal authenticity message 
including at least one of visible, audible and tactile 
information. 

22. (original) The method according to claim 15 wherein 
the terminal outputs the terminal authenticity message 
including at least one of visible, audible and tactile 
information 

23. (original) The method according to claim 21 wherein 
the message is output only partially by the device, 
according to a preselection by the user, 
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24. (original) The method according to claim 21 wherein 
the message is output only partially by the terminal 
according to a preselection by the user 

25. (original) The method according to claim 12 further 
comprising authenticating the device to the server. 

26. (original) The method according to claim 12 further 
co.mprising authenticating the user. 

27. (currently amended) A method for a user devir^ 

to establish a trustworthy connection between ^ 
^ "^^^^ and a server from a terminal comprising the 
steps of: 

requesting said rccoiving iapu L — from a terminal at 
which said user is accessing said server to obtain 
authentication bv said server ; 

receiving a terminal auth e nticity message from said 
serv&r authenticating the terminal; and 

causing an generating a terminal authenticity output 
message to be displayed to said user. 
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28. (currently amended) The method according to claim 27 
wherein said authenticity output n.^.. aae i.s H^.p i.y^H 
by said user device g o ncrating oompriaco Li ocGjiiiuy at 
loaot one jtorod mcgoagc . 

29. (currently amended) The method according to claim 20 
Cl^Xja 27 further r-omDri.«.ir.r, ^ aid us^r rievlce r>rnviWin^ 

user-specific authenticat ion inforn,ation tn ...-in 

terminal and wheroin sa id authPn ticitv nn^put mess^g ^ 
is created and displayed bv ^^ir^ termin;.! wherein said 
. generating comprises performing a n exchange of m^^^:.n^. 
with said user according to a storPd authenti r-i i-y 
message . 

30. (currently amended) A program storage device 
readable by machine, tangibly embodying a program of 
instructions executable by the machine to perform 
method steps for a server to establish a trustworthy 
connection with a user via a user device at a terminal, 
said method steps comprising: 
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receiving input from a terminal at which said user U 
accessing said server; 



authenticating the terminal; and 
/V generating a terminal authenticity message for dPli.^.y 



to said user device, 



31- (new) The terminal according to claim 6 further 
comprising means for receiving user-specific predetermined 
authentication information from said device for use in 
creating said authenticity output message. 
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